← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-2418
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
CVE-2026-2343
PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download
CVE-2026-1542
Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection
CVE-2026-1369
Conditional CAPTCHA <= 4.0.0 - Open Redirect
CVE-2026-1235
WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
CVE-2026-1128
WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
CVE-2026-0829
Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending
CVE-2025-9544
Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation
CVE-2025-9116
WPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-6027
Ace User Management <= 2.0.3 - Subscriber+ Authentication Bypass via Password Rest